Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
File: bkif4cfiCgsMY4QsRcFsV2MXhdM.mft (raw, json)
Hash identifier: lUq4vxXDFTIbvff+cnTsMAmN/5keHKM8RQtNxWah6Aw=
Subject key identifier: 4E:7D:FC:EE:CC:93:D8:24:29:35:5D:69:C4:25:DC:F8:23:50:3E:4E
Authority key identifier: 6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
Certificate issuer: /CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Certificate serial: 0197B6A11E1187036AAC6D33ED6BF5BD5790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:01:41 +0000
Manifest this update: Sat 28 Jun 2025 13:01:41 +0000
Manifest next update: Sun 29 Jun 2025 13:01:41 +0000
Files and hashes: 1: GDkJM0lrFwKj0pA-1b6WqbIKy5U.roa (hash: AJLBt3MjV7p+Y7RRJ8TCQIrAHHyRPR0203cHSf77IXw=)
2: bkif4cfiCgsMY4QsRcFsV2MXhdM.crl (hash: WdbI1NPBVDvkvXzqJIDsZVso35DXM/mBrVPZB1r6YJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:1e:11:87:03:6a:ac:6d:33:ed:6b:f5:bd:57:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Validity
Not Before: Jun 28 13:01:41 2025 GMT
Not After : Jun 29 13:01:41 2025 GMT
Subject: CN=4e7dfceecc93d82429355d69c425dcf823503e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:06:8a:e4:3b:ef:3a:57:4c:5a:f6:fc:c9:36:
77:5e:7b:7c:f3:54:42:d8:fc:91:23:4e:a5:ab:34:
81:0d:1d:f1:c3:09:93:de:7a:2e:e8:90:ca:1b:4d:
11:81:3d:31:1b:a5:92:dc:ba:9d:5a:a5:63:89:95:
94:a2:3a:35:43:f5:a8:b1:01:a3:51:b6:8e:c2:88:
c6:02:8a:14:53:c7:0f:77:6d:d0:bf:7e:86:cf:2a:
47:16:0d:c0:fd:95:f8:43:67:b1:40:4c:bf:6d:20:
06:74:db:13:c9:28:99:fc:30:f5:3b:a8:c7:7a:5d:
c2:3b:88:b2:26:d2:27:3e:95:4e:9a:ba:eb:23:d9:
d8:ee:fb:a8:5b:34:f6:d5:a5:d3:25:ac:6b:b8:8d:
7a:6c:a4:1b:fd:2d:80:59:84:34:48:1a:88:fe:e3:
ec:36:a4:c3:5c:db:68:60:af:89:a8:db:15:da:72:
e0:6d:c1:4e:a1:8b:3e:c3:73:fa:c2:62:6f:be:b7:
69:e5:bd:60:49:33:8e:68:2d:c8:b6:18:70:c4:4d:
1f:a3:8f:8f:ce:bd:10:32:e8:5d:de:1e:58:b7:73:
10:63:e9:9e:cf:b3:dc:84:20:ca:98:81:0e:e9:7b:
1e:5d:a9:58:6b:91:46:db:6b:12:6a:58:59:a6:06:
19:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7D:FC:EE:CC:93:D8:24:29:35:5D:69:C4:25:DC:F8:23:50:3E:4E
X509v3 Authority Key Identifier:
keyid:6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:0e:dc:a0:74:ed:4f:ff:a9:a6:28:c5:24:ba:50:11:29:bf:
14:41:ad:31:66:d5:4c:e6:01:ef:10:db:e1:5d:cf:e3:5d:1b:
ea:81:92:35:b7:4d:cb:54:33:13:e6:aa:70:77:f2:ca:31:2e:
c9:7a:51:5e:a7:aa:d8:27:61:32:ed:bd:be:0b:83:dc:63:99:
fa:92:a1:50:11:3b:6b:ce:ae:22:65:38:ae:fc:70:f2:93:ca:
2c:20:f5:c8:5a:e2:a3:76:ce:02:41:7b:e3:5f:8f:e5:8e:f0:
c5:8a:04:55:8f:52:f4:07:50:79:9b:e8:da:54:7e:7a:d8:70:
31:2b:3c:4b:63:8c:1b:f3:f3:a9:9f:1b:3d:ce:60:4b:91:a9:
cf:88:85:cb:24:7c:12:30:73:b6:58:17:31:64:82:b4:d6:aa:
51:75:57:13:d3:8b:de:90:e9:6a:18:b2:98:84:af:92:b4:bb:
a9:c5:82:99:fd:f9:c0:5f:f7:61:41:a9:a3:e7:8e:28:7a:63:
fc:91:cf:1a:f9:16:be:1a:34:fc:d6:41:e3:f1:4a:f0:e3:60:
07:cf:2c:78:26:dd:57:c7:ec:ad:10:fa:62:fe:25:cb:5a:41:
d1:61:a8:68:09:45:e1:7d:0a:73:a4:2b:b0:fd:d6:dd:7b:eb:
a6:d0:f1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:29:51 2025 by rpki-client